Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File: 5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier: VxmjXY4odNIcbXstTDg/8L0MF9b3EBQfW3RsbgiSrGk=
Subject key identifier: 87:FA:10:F9:53:19:A2:46:64:93:66:CA:C4:22:0F:DD:99:2C:FF:32
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer: /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial: 019FA975CD853DAB755040D47EBCD8F2711C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number: 12BC
Signing time: Tue 28 Jul 2026 16:01:37 +0000
Manifest this update: Tue 28 Jul 2026 16:01:37 +0000
Manifest next update: Wed 29 Jul 2026 16:01:37 +0000
Files and hashes: 1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: cCWOwTqi567ZrMCRr0KNj/k6Aa7OMSQkOIyla6LwXZc=)
2: V0hqPIINhp_WNvjzrr7PJydJ3zE.roa (hash: 201DsxPOm6cpm2Im3U0XIX6Q6+lglCsbvOqe62R0Yfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:cd:85:3d:ab:75:50:40:d4:7e:bc:d8:f2:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Validity
Not Before: Jul 28 16:01:37 2026 GMT
Not After : Jul 29 16:01:37 2026 GMT
Subject: CN=87fa10f95319a246649366cac4220fdd992cff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:01:63:2b:73:a6:d3:ec:51:85:66:0d:76:
bd:27:10:a9:11:1b:56:19:49:b4:c9:15:b6:e2:17:
54:c0:05:4c:bc:50:63:46:62:be:5f:f8:3d:16:42:
b9:25:d2:53:84:02:13:30:7d:24:fe:1b:8b:a0:5a:
81:7c:7f:e6:ed:0f:8b:08:d7:50:a2:fb:22:24:fc:
46:10:20:f0:5c:88:92:4d:d1:3c:32:69:4d:ff:8f:
d9:7f:e4:81:73:f8:84:67:3e:5a:07:a1:62:39:5c:
81:94:15:06:92:7b:27:ba:e2:c0:67:2b:25:e1:e8:
67:f1:84:fb:10:f2:c8:eb:5f:0c:f5:45:ad:5e:5b:
4b:09:e5:18:85:0a:fd:fa:58:f4:39:b0:95:32:01:
c5:38:90:28:64:00:56:c9:21:1b:47:82:30:ff:af:
78:da:f1:a3:d0:f8:78:fb:45:8f:a5:95:43:7d:74:
ea:14:4c:56:9e:08:54:97:4f:fc:fe:a0:4d:f1:b7:
6b:0f:a4:22:52:c0:72:5b:17:2d:d9:ec:43:c1:2f:
d7:aa:2b:cf:f1:9f:9a:73:de:a0:68:59:1d:73:84:
68:23:59:ce:c6:d0:86:4c:06:a8:e2:a2:af:4e:c3:
23:da:33:64:9f:9e:68:bf:4e:86:c7:37:fb:7b:0d:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:10:F9:53:19:A2:46:64:93:66:CA:C4:22:0F:DD:99:2C:FF:32
X509v3 Authority Key Identifier:
keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:40:04:54:38:3d:48:86:0a:56:31:da:b4:4e:10:ed:8c:a4:
9e:bb:fc:09:25:16:f2:a0:24:2a:b7:3e:70:7c:4a:35:9e:8a:
57:1d:63:35:b1:86:89:0a:c7:9e:8e:30:ab:46:5a:cd:46:2f:
2b:38:a0:cf:76:c9:61:06:db:6e:4f:2f:00:ad:8b:d2:d9:30:
b0:c9:02:f0:b2:20:06:d5:54:03:dd:10:b6:df:58:65:ff:ae:
80:fc:e7:2c:a7:be:77:44:b1:a8:d2:b2:ce:94:96:62:78:e0:
fb:7c:8e:37:e3:35:ab:c4:eb:b3:31:e1:43:f9:0e:2b:21:9a:
e3:33:10:5b:03:5e:5e:59:38:7f:61:c5:1b:e4:75:7e:c6:b4:
97:44:63:ed:ef:33:02:a5:23:f7:c5:40:b0:ba:be:3a:9a:81:
16:7d:39:43:a3:2c:c8:46:da:7b:6e:66:d1:2f:f4:80:16:07:
ab:fa:df:35:68:d2:43:fc:58:17:9f:72:98:fd:44:88:17:83:
5d:ba:12:12:0a:63:8d:e0:5e:ca:5a:7a:dd:a5:4e:5c:55:48:
1d:fb:f3:12:b4:eb:39:e7:38:c7:4f:cf:01:07:48:dc:e5:7a:
f9:b1:9a:ff:4e:f9:d6:91:1f:e4:cb:f7:8e:14:ce:78:8f:40:
5f:b1:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:37 2026 by rpki-client